Skill UI

A comprehensive security tool designed to detect prompt injection attacks targeting Large Language Models (LLMs). It employs a multi-layered approach combining regex signature matching, structural anomaly scoring, and advanced DeBERTa transformer classification. It is essential for securing input validation layers in chatbots, AI agents, and RAG pipelines, and for retrospectively auditing LLM interaction logs against OWASP standards.

A comprehensive guide for implementing Data Loss Prevention (DLP) policies across the Microsoft 365 ecosystem using Microsoft Purview. It details how to protect PII, PHI, and PCI data across Exchange Online, SharePoint, OneDrive, and endpoints. Key features include configuring custom sensitivity labels, regex-based sensitive information types, and endpoint DLP rules via PowerShell, ensuring robust compliance and data governance.

This tool automates the end-to-end workflow for GDPR Data Subject Access Requests (DSAR). It handles identity verification, discovers PII across structured and unstructured data sources using NER and regex, maps data to Article 15 requirements, and generates auditable compliance reports, ensuring adherence to ICO/EDPB guidelines and scaling compliance efforts.

Hookify rules enable developers to define custom, event-driven workflows using Markdown files with YAML frontmatter. These rules monitor specific operational events (such as bash commands, file edits, or user prompts) and can trigger warnings or block operations when predefined regex patterns are matched. They are essential for enforcing coding standards, preventing dangerous operations, and guiding development adherence in complex software environments.

A comprehensive guide detailing how to configure and manage GitHub's secret scanning feature. This skill covers enabling Secret Protection, setting up push protection to block leaked credentials before they reach the repository, defining custom regex patterns, and providing workflows for triaging alerts and resolving blocked pushes (including using git rebase or bypassing protections). Essential for maintaining secure code repositories and complying with security standards.

This guide details how to programmatically define and manage Headless CMS content models using the ModelFactory pattern. Developers learn to declare fields (including complex types like richText, file, object), set validators (required, unique, regex), configure field layouts, and manage API naming conventions entirely through code. It is essential for extending and customizing CMS core functionality.

This utility provides comprehensive capabilities for viewing, creating, uploading, editing, and comparing Markdown files stored in the cloud drive. It is designed for scenarios requiring local content manipulation, such as creating new files, fetching existing content, performing localized text patching (regex replacement), comparing version differences, or overwriting content. Note that it specifically handles structured Markdown files, not docx conversions, and defers cloud space management operations (like searching, moving, or permissions) to other dedicated skills.

A comprehensive playbook detailing NoSQL injection techniques, moving beyond traditional SQLi. Covers deep vulnerabilities in MongoDB, including operator injection, login bypass, blind data extraction using regex, and $where execution. Also includes attacks specific to Redis, CouchDB, and general API parameter pollution.

Automated system designed to monitor paste sites (e.g., Pastebin, GitHub Gists) for leaked credentials, API keys, and sensitive data dumps. It uses advanced scraping, keyword matching, and regex patterns to provide early detection of data breaches and security incidents.

Chainsaw is a fast, Rust-based forensic tool designed for first-response threat hunting. It analyzes collected Windows EVTX files using the comprehensive Sigma rule corpus, built-in detection rules, and high-speed keyword/regex searching. Furthermore, it uniquely analyzes critical artifacts such as shimcache, SRUM, and event-log gaps, providing robust, offline detection capabilities without needing a SIEM pipeline. It is essential for digital forensic triage and hypothesis confirmation.

Specialized skill to rewrite and humanize AI-generated natural language files (like notes or documentation). It removes common 'AI-isms' such as sycophantic openings, stock vocabulary, over-explaining, and excessive signposting. Users can choose between a fast, deterministic regex cleanup or a deep LLM rewrite (default mode) using Claude to enhance burstiness and match a natural human voice, all while strictly preserving code blocks, URLs, and headings.

Hookify rules enable developers to define custom, event-driven workflows using Markdown files with YAML frontmatter. These rules monitor specific operational events (such as bash commands, file edits, or user prompts) and can trigger warnings or block operations when predefined regex patterns are matched. They are essential for enforcing coding standards, preventing dangerous operations, and guiding development adherence in complex software environments.